lib: TLS session ticket caching reworked

Described in detail in internal doc TLS-SESSIONS.md

Main points:
- use a new `ssl_peer_key` for cache lookups by connection filters
- recognize differences between TLSv1.3 and other tickets
  * TLSv1.3 tickets are single-use, cache can hold several of them for a peer
  * TLSv1.2 are reused, keep only a single one per peer
- differentiate between ticket BLOB to store (that could be persisted) and object instances
- use put/take/return pattern for cache access
- remember TLS version, ALPN protocol, time received and lifetime of ticket
- auto-expire tickets after their lifetime

Closes #15774

lib/vtls/openssl.h

@@ -36,6 +36,8 @@
 
 #include "urldata.h"
 
+struct ssl_peer;
+
 /* Struct to hold a Curl OpenSSL instance */
 struct ossl_ctx {
   /* these ones requires specific SSL-types */
@@ -53,6 +55,8 @@ struct ossl_ctx {
   BIT(reused_session);              /* session-ID was reused for this */
 };
 
+size_t Curl_ossl_version(char *buffer, size_t size);
+
 typedef CURLcode Curl_ossl_ctx_setup_cb(struct Curl_cfilter *cf,
                                         struct Curl_easy *data,
                                         void *user_data);
@@ -63,7 +67,6 @@ CURLcode Curl_ossl_ctx_init(struct ossl_ctx *octx,
                             struct Curl_cfilter *cf,
                             struct Curl_easy *data,
                             struct ssl_peer *peer,
-                            int transport, /* TCP or QUIC */
                             const unsigned char *alpn, size_t alpn_len,
                             Curl_ossl_ctx_setup_cb *cb_setup,
                             void *cb_user_data,
@@ -94,8 +97,10 @@ CURLcode Curl_ossl_ctx_configure(struct Curl_cfilter *cf,
  */
 CURLcode Curl_ossl_add_session(struct Curl_cfilter *cf,
                                struct Curl_easy *data,
-                               const struct ssl_peer *peer,
-                               SSL_SESSION *ssl_sessionid);
+                               const char *ssl_peer_key,
+                               SSL_SESSION *ssl_sessionid,
+                               int ietf_tls_id,
+                               const char *alpn);
 
 /*
  * Get the server cert, verify it and show it, etc., only call failf() if